Town of Salem Game Breached, 7.6M Players Affected

BlankMediaGames disclosed a data breach that affects millions using the browser-based role-playing game.

A data breach at BlankMediaGames (BMG) has affected more than 7.6 million players of Town of Salem, a browser-based role-playing game.

The incident was disclosed on December 28 to cybersecurity company DeHashed, which received an anonymous email containing evidence of server access and the database. DeHashed says affected data includes usernames, emails, passwords, IP addresses, game and forum activity, and payment information. Some users who paid for features had billing data compromised.

However, in an announcement about the breach on the Town of Salem forum, a representative by the name of Achilles reported that the game does not store any credit card or payment data. Further, the representative wrote, all passwords were hashed and not stored in plain text. Third-party payment processors are responsible for financial transactions; Town of Salem does not have access.

"The only important data compromised would be your Username/hashed password, IP and email," Achilles wrote. "Everything else is just game related data."

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legacy i...